This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
File:                     PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft (raw, json)
Hash identifier:          SIw1NXvrRlziXSE71emjJ1++uBrejLPA6+CJ6+4QedY=
Subject key identifier:   73:2C:E9:92:02:F6:65:E1:EC:46:7B:C5:CC:9E:F6:CD:DB:57:79:18
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
Manifest number:          47
Signing time:             Fri 19 Dec 2025 19:36:58 +0000
Manifest this update:     Fri 19 Dec 2025 19:36:57 +0000
Manifest next update:     Fri 26 Dec 2025 19:36:57 +0000
Files and hashes:         1: PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl (hash: vgetBUyP3c6zAsGCFWmd0eJQiRsHfDKnmhbWWqai310=)
                          2: 12A52794DD1211F0B41550BC5F6F56BC.roa (hash: oz8NIpj9Tm03gt/8vqVFLzi3RgMkoP/E07i1bU9Ue0g=)
                          3: A1FA022EC60C11F08F496250C4F9AE02.roa (hash: QpiAf33FZgMhwGGuEHfq10s771b9Wjyenh0fOxv6MN8=)
                          4: 844A140AC5F111F08382761DC4F9AE02.roa (hash: Gx2kCxxEj3/RIVTnJMerfYLqRKpDP3Xj2fha+8LVQi8=)
                          5: 0228453AC5F811F08FFA5F38C4F9AE02.roa (hash: r4LE1v/40b0WOCFXtWlsGTCc5sxQVvVVfzbmBEp1ue4=)
                          6: 901A806E936311F0AFC2992BC4F9AE02.roa (hash: 4IjRBRyjuEdbkIY8f1/iw3KdwGSRgiR78o99r2JvTFk=)
                          7: 025F9668C60A11F0AB4AE483C4F9AE02.roa (hash: 12RMAudJL+SHTcjUoCBqfB1EVhMixsbW3pw7P/AEY6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 19:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Dec 19 19:36:57 2025 GMT
            Not After : Dec 26 19:36:57 2025 GMT
        Subject: CN=6945a95a-f93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:58:42:9d:9b:6c:28:d5:40:10:b6:90:73:
                    a7:4c:a7:27:a2:66:ad:de:6e:d8:e6:22:8e:df:b6:
                    1d:8e:0e:ef:c6:81:a1:65:69:c4:6f:57:94:91:dd:
                    ee:39:8e:49:73:07:29:2d:ba:68:b3:0c:1e:24:ba:
                    36:cd:98:6b:b5:4f:18:1c:ca:0c:24:2b:07:a9:a0:
                    98:58:08:c6:9c:97:c9:30:9d:01:72:fc:db:fd:fa:
                    ed:99:40:2a:25:c8:15:68:b5:1a:52:9f:a4:49:97:
                    03:3c:79:aa:b4:da:2e:6a:fa:33:8a:e7:b8:e8:b8:
                    64:63:df:02:af:b4:04:af:4e:51:ac:a1:d1:db:c8:
                    3f:e4:9c:18:d9:81:34:31:04:1a:50:f0:e3:90:72:
                    a8:d0:04:d0:02:ce:dd:38:47:c6:6b:30:9a:18:8c:
                    21:ac:a7:77:a7:d3:f3:00:dc:dd:7c:df:15:73:53:
                    20:d4:91:e1:cb:8f:83:83:2f:0e:02:be:da:16:5b:
                    e0:8f:8b:d5:1d:1d:14:e9:7f:71:a4:a0:58:c1:db:
                    4c:f6:ff:4e:6a:59:a1:7e:c2:96:95:d5:7c:d6:bb:
                    48:97:ae:02:04:83:6a:51:58:7a:bd:9a:94:a2:7c:
                    fb:38:6c:35:2c:f0:1a:e0:61:87:eb:d6:d8:ba:f5:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2C:E9:92:02:F6:65:E1:EC:46:7B:C5:CC:9E:F6:CD:DB:57:79:18
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6d:73:ab:94:d0:a3:e5:e7:9e:e3:ae:44:a4:ea:5a:b9:95:
         1e:1f:87:f0:2e:a1:b4:b1:5f:b4:23:50:af:cd:be:ca:8e:55:
         6a:9e:03:38:70:8a:12:d3:e2:c1:8e:0d:46:ec:d0:76:5f:09:
         6f:3f:06:30:a3:6c:5d:c6:45:ac:e4:c2:d2:0d:c7:e4:b4:ec:
         e4:87:a4:97:1a:ef:77:46:90:a6:14:34:77:e4:1b:d3:22:46:
         75:7f:84:16:25:f9:e7:df:47:bd:81:8f:37:20:7c:76:36:50:
         ca:11:e1:57:32:af:3d:e9:33:0f:7f:83:e6:ef:89:f1:8d:51:
         72:b7:8a:14:27:31:28:f1:8e:28:7b:09:92:5e:96:65:10:3c:
         e9:0b:5f:f2:59:20:97:15:5d:d7:be:5b:5c:40:aa:89:c8:ec:
         65:09:ed:20:85:6a:37:ae:ab:55:ea:4b:7c:6a:57:73:4f:87:
         6b:2e:8d:70:63:eb:cb:ab:cd:e5:cc:b5:41:a3:1d:59:fa:6b:
         6e:c7:96:d3:01:54:06:4e:89:5f:11:3c:9d:54:82:d7:49:5e:
         09:8f:35:80:2a:59:ac:6e:fd:d0:22:f2:6c:2e:30:4a:44:3d:
         33:73:cb:63:3d:e1:b3:fb:42:9a:ff:00:ff:32:9e:9a:ea:39:
         38:c4:2f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:11:22 2025 by rpki-client